Risk Management Playbookv0.1.0

A bank experiences a ransomware attack disrupting online banking and payment systems. The skill guides activating BCP for critical functions like payments, implementing IT disaster recovery to restore systems within RTO/RPO, and managing reputational risk through crisis communication to customers and regulators.

A manufacturing company faces a geopolitical event blocking key raw material imports. The skill assists in scenario planning for alternative suppliers, assessing operational resilience through BIA to prioritize production lines, and using risk registers to monitor vendor risk and insurance coverage for business interruption.

A hospital suffers a data breach exposing patient records. The skill supports fraud prevention by implementing internal controls for data access, conducting reputational risk management via social listening and stakeholder communication, and ensuring compliance with regulations like HIPAA through ERM frameworks.

A fintech startup needs to establish fraud prevention as it scales. The skill helps design three lines of defence with segregation of duties, set risk appetite for synthetic identity fraud, and integrate AML/CFT and KYC processes using risk dashboards for real-time monitoring.

A retail chain expanding internationally faces trade sanctions and regulatory changes. The skill enables geopolitical exposure mapping, scenario planning for market exits, and crisis communication strategies to protect brand reputation while adjusting insurance strategies like parametric insurance.

A software company offering risk management tools on a subscription model. The skill aids in business continuity planning for cloud service outages, disaster recovery for data centers, and fraud prevention through secure payment processing and internal controls.

A firm providing risk management consulting to clients across industries. The skill supports enterprise risk assessment using ISO 31000 frameworks, developing BCP and DR plans, and offering crisis communication services to enhance operational resilience.

A company specializing in risk transfer solutions like cyber insurance and D&O policies. The skill helps assess client risks using BIA and risk registers, recommend parametric insurance for specific exposures, and manage reputational risk through compliance with regulations like DORA.